GB/T 35278-2017 English PDFUS$599.00 · In stock
Delivery: <= 5 days. True-PDF full-copy in English will be manually translated and delivered via email. GB/T 35278-2017: Information security technology -- Technical requirements for mobile terminal security protection Status: Valid
Basic dataStandard ID: GB/T 35278-2017 (GB/T35278-2017)Description (Translated English): Information security technology -- Technical requirements for mobile terminal security protection Sector / Industry: National Standard (Recommended) Classification of Chinese Standard: L80 Classification of International Standard: 35.040 Word Count Estimation: 30,399 Date of Issue: 2017-12-29 Date of Implementation: 2018-07-01 Regulation (derived from): National Standards Bulletin 2017 No. 32 Issuing agency(ies): General Administration of Quality Supervision, Inspection and Quarantine of the People's Republic of China, Standardization Administration of the People's Republic of China GB/T 35278-2017: Information security technology -- Technical requirements for mobile terminal security protection---This is a DRAFT version for illustration, not a final translation. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.) will be manually/carefully translated upon your order. Information security technology - Technical requirements for mobile terminal security protection ICS 35.040 L80 National Standards of People's Republic of China Information Security Technology Mobile terminal security technology requirements 2017-12-29 Posted 2018-07-01 implementation General Administration of Quality Supervision, Inspection and Quarantine of People's Republic of China China National Standardization Administration released Directory Preface Ⅰ Introduction Ⅱ 1 Scope 1 2 Normative references 1 3 Terms and Definitions, Abbreviations 1 3.1 Terms and definitions 1 3.2 Abbreviations 2 4 Mobile Terminal Overview 2 5 safety issues 3 5.1 Assumptions 3 5.2 Security threats 4 6 safety purposes 4 6.1 TOE safety purpose 4 6.2 Environmental Safety Purpose 5 7 safety function requirements 5 7.1 Overview 5 7.2 FAU category. Security audit 7 7.3 FCS class. Password support 8 7.4 FDP category. User Data Protection 11 7.5 Category FIA. Identification and Identification 11 7.6 FMT category. Safety Management 13 7.7 FPT class .TSF protection 16 7.8 FTA classes. TOE access 18 7.9 FTP class. Trusted path/channel 18 8 Security Requirements 18 8.1 Overview 18 8.2 ADV class. Development 19 8.3 AGD category. Guidance document 19 8.4 ALC category. Life cycle support 20 8.5 ASE category. Safety Target Assessment 21 8.6 ATE category. Test 23 8.7 AVA category. Vulnerability assessment 23 9 Fundamentals 24 9.1 Fundamental Principles of Safety 24 9.2 Safety Requirements Fundamentals 24 References 26 ForewordThis standard was drafted in accordance with the rules given in GB/T 1.1-2009. Please note that some of this document may be patentable. The issuing agencies of this document do not bear the responsibility of identifying these patents. This standard by the National Information Security Standardization Technical Committee (SAC/TC260) and focal point. This standard drafting unit. China Institute of Information and Communications (Ministry of Industry and Information Technology Telecommunications Research Institute), Beijing University of Posts and Telecommunications, China Mobile Letter Group, Huawei Technologies Co., Ltd. The main drafters of this standard.Zhai Shijun, Ning Hua, Pan Juan, Yang Zhengjun, YAO Nan, Jiao four generation, Guowei, Yuan Qi, Chen Hong Ji, Yuan Jie, Qiu Qin, Huang Xi, Yang Guanghua, He Shen, Peng Hua Xi, Liang Hongliang, Liu Shuchang.IntroductionWith the rapid development of mobile Internet technology, mobile terminals have been widely used and have been expanding in function. With the move Mobile terminal intelligent and network broadband trend, mobile Internet business after another, increasing prosperity. At the same time, mobile terminals are also facing A variety of security threats, such as network eavesdropping, cyber attacks, physical access, malicious applications, the security of mobile terminals are facing severe challenges. this Standards According to the security threats faced by mobile terminals, based on the requirements of GB/T 18336, the mobile terminal security objectives, the provisions of the mobile Terminal security requirements and security requirements for the mobile terminal security design, development, testing and evaluation to provide guidance to help improve Mobile terminal security standards to reduce the risk faced by mobile terminals to protect the user's personal safety and national security, to prevent the mobile terminal shift Moved the adverse effects of Internet security and promoted the healthy development of the entire mobile Internet. Information Security Technology Mobile terminal security technology requirements1 ScopeThis standard specifies the technical requirements for the safety protection of mobile terminals, including the purpose of the safety of mobile terminals, security features and safety requirements Claim. This standard applies to the design, development, testing and evaluation of mobile terminals.2 Normative referencesThe following documents for the application of this document is essential. For dated references, only the dated version applies to this article Pieces. For undated references, the latest edition (including all amendments) applies to this document. GB/T 18336.1-2015 Information technology - Security technology - Guidelines for the evaluation of information technology security - Part 1. Introduction and general model 3 Terms and Definitions, Abbreviations 3.1 Terms and definitions GB/T 18336.1-2015 defined and the following terms and definitions apply to this document. 3.1.1 Mobile terminal mobileterminal Mobile computing devices used in mobile communications networks include mobile smart terminals and other terminal devices with similar capabilities. 3.1.2 Mobile terminal user mobileterminaluser Objects that use a mobile terminal, interact with the mobile terminal, and are responsible for the physical control and operation of the mobile terminal. 3.1.3 User data userdata User personal information stored on the mobile intelligent terminal includes data generated locally by the user, data locally generated for the user, After the user permission to enter the user data area by external data. 3.1.4 Application software applicationsoftware Software installed on the mobile terminal's operating system to provide services to users. 3.1.5 Access control accesscontrol A means to ensure that resources of a data processing system can only be accessed by authorized entities on an authorized basis. 3.1.6 Volatile memory volatilememory When the current is turned off, the stored data will disappear on the computer or terminal storage media. ......Tips & Frequently Asked Questions:Question 1: How long will the true-PDF of GB/T 35278-2017_English be delivered?Answer: Upon your order, we will start to translate GB/T 35278-2017_English as soon as possible, and keep you informed of the progress. The lead time is typically 3 ~ 5 working days. The lengthier the document the longer the lead time.Question 2: Can I share the purchased PDF of GB/T 35278-2017_English with my colleagues?Answer: Yes. The purchased PDF of GB/T 35278-2017_English will be deemed to be sold to your employer/organization who actually pays for it, including your colleagues and your employer's intranet.Question 3: Does the price include tax/VAT?Answer: Yes. Our tax invoice, downloaded/delivered in 9 seconds, includes all tax/VAT and complies with 100+ countries' tax regulations (tax exempted in 100+ countries) -- See Avoidance of Double Taxation Agreements (DTAs): List of DTAs signed between Singapore and 100+ countriesQuestion 4: Do you accept my currency other than USD?Answer: Yes. If you need your currency to be printed on the invoice, please write an email to Sales@ChineseStandard.net. In 2 working-hours, we will create a special link for you to pay in any currencies. Otherwise, follow the normal steps: Add to Cart -- Checkout -- Select your currency to pay. |